Zero-Knowledge Cloud Sync

End-to-End Encrypted Synchronization

Work seamlessly across multiple computers without compromising database credentials or corporate secret keys.

Cryptographic Specifications:

• Key Derivation: Argon2id with parameters: Memory = 64 MB, Iterations = 3, Parallelism = 4.
• Authenticated Encryption: AES-256-GCM with unique 96-bit initialization vectors per synced payload.
• Local Vault Storage: Encrypted using SQLCipher on your local disk.

What is Synchronized:

• Connection hostnames, ports, usernames, and SSH bastion configurations.
• Saved SQL snippet collections, folders, and query scratchpads.
• Custom UI layouts, themes, and database alias tags.

Zero-Knowledge Principle: The cloud sync relay server only stores opaque ciphertext blobs. Even if our servers are compromised, your database passwords, SSH keys, and connection strings remain mathematically impossible to decrypt without your Master Passphrase.